Wakayama City: a public health center sent meeting materials with the names and ages of 414 COVID-19 patients to an unrelated person by mistyping an address
Materials meant for a staff member's personal address went to a third party because the address was wrong. The city has not been able to reach the recipient.
Disclosed
2021-01-25
Organizations involved
1
Leaked or at risk
414
414
Downtime
Unknown
What happened
Around this time, the health center sent meeting materials to a staff member's personal address, but the address was wrong when the request was made, so the mail reached a third party. [1]
Around this time the address error was discovered. At 10:00 the city asked the recipient to delete the mail and contact the city, but there was no reply. [1]
The city sent the same request again, but has not reached the recipient. [1]
The materials sent in error include the names, ages, genders, admission and discharge dates, hospital names, possible infection routes and positive-test dates of 414 patients. The city phoned the people concerned to apologize and will review how it sends mail containing personal data. [1]
Timeline
- Started 2021-01-19
- Detected 2021-01-20
- Disclosed 2021-01-25
- 6 days
Attack or cause
- Method
- [Misdelivery]
- Impact
- [Data leak]
- Entry point
Data exposed or at risk
Organizations involved
[Breached][Moderate]Wakayama, WakayamaMunicipality414 leaked
Wakayama City
Sources
- [1][News]新コロ感染者情報、職員個人メアド宛の送信でミス - 和歌山市Security NEXT · 2021-01-25